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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1 1 . (Previously presented) A policy setting support tool for creating, in a 

2 computer system equipped with an access control unit that controls access to computer-managed 

3 resources based on policies, said policy setting support tool comprising: 

4 a first information database arranged by the kind of subject containing sample 

5 policies prepared as standard or recommended policies, an access log holding a history of the 

6 normal behavior of the subject, and installation information including the path to the subject 

7 installed in said computer system; 

8 a second information database arranged by the kind of object containing 

9 association information representing the subjects that are most frequently used to access the 

10 object; 

11 an access monitoring unit for monitoring the behavior of the subject and recording 

12 it in said access log; 

13 a differential detection unit for collating said installation information with said 

14 sample policy and detecting the differences between them; 

15 a policy creation unit for creating a draft policy based on said sample policy, said 

16 association information, and said differences detected by said differential detection unit; and 

17 a user interface unit for presenting said draft policy to the user, revising said draft 

1 8 policy as directed by the user, and saving the revised policy as the final policy. 

1 2. (Original) The policy setting support tool of claim 1, further comprising: 

2 a unit for creating a draft policy from one or more of said sample policy, said 

3 association information, and said access log, in accordance with the directions given by the user 

4 through said user interface unit, and 
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5 a unit for setting up a policy by accepting requests for revising said draft policy 

6 and saving the revised policy. 

1 3. (Previously presented) A policy setting support tool for maintaining, in a 

2 computer system equipped with an access control unit that controls access to computer-managed 

3 resources based on policies, said policy setting support tool comprising: 

4 an information database or a set of information database containing most up-to- 

5 date information regarding the subjects and objects of access; 

6 a differential detection unit for collating the most up-to-date information 

7 regarding the subject and object of the access retrieved from said information database or said set 

8 of information database with the policies that arc already set up, and detecting the items that 

9 need to be revised; 

10 a policy creation unit for creating a draft policy based on the result of detection 

1 1 produced by said differential detection unit; and 

12 a user interface unit for presenting said draft policy to the user for visual 

13 confirmation and revising said draft policy as directed by the user. 

1 4. (Previously presented) The policy setting support tool of claim 3, wherein said 



2 differential detection unit performs the collation and detection processing at regular intervals or 

3 at the demand of the user, and upon detecting any difference, presents the detected difference to 

4 the user through said user interface unit, and further wherein the user of said policy setting 

5 support tool visually checks said difference presented to the user, determines whether the policy 

6 should be revised as presented, revises it if and as necessary through said user interface unit, and 

7 saves the final policy. 

5-10. (Canceled) 
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